Php intermediate mysql statement implementation code

If you want to insert a string with single or double quotation marks in the format of "Hello" to the database, you can use a backslash to escape the string. But what if there is too much content? You cannot manually escape each of these special characters. What's more, you usually process the content automatically submitted by the form.

Therefore, use the mysql_real_escape_string function:

Mysql_real_escape_string-special characters in the character strings used in the escape SQL statement, taking into account the connected current character set.

But note: This function does not escape % and _. In addition, it is best not to use this function for the entire SQL statement, but to only escape the string parameters passed into the SQL statement, otherwise unexpected results will occur.

Script example:
Copy codeThe code is as follows:
$ Item = "Zak's and Derick's Laptop ";
$ Escaped_item = mysql_real_escape_string ($ item );
Printf ("Escaped string: % s \ n", $ escaped_item );
?>